kics
kics copied to clipboard
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
### Expected Behavior When scanning a docker-compose file, the following value ```yaml security_opt: - no-new-privileges=true ``` should not be marked as an issue ### Actual Behavior Kics returns a finding...
### Expected Behavior [The rule](https://docs.kics.io/latest/queries/cloudformation-queries/aws/2564172f-c92b-4261-9acd-464aed511696/) triggers when variable name appears sensitive. ### Actual Behavior The rule triggers if a variables value is 20 or 40 chars in length. It doesn't...
### Expected Behavior A Cloud Formation template containing a DynamoDB table including the following JSON should not result in [this](https://docs.kics.io/latest/queries/cloudformation-queries/aws/4bd21e68-38c1-4d58-acdc-6a14b203237f/) vulnerability ``` "SSESpecification": { "SSEEnabled": false }, ``` Why? A...